Configuring shibboleth SP NameID format persistent

[Cantor, Scott]

On 6/16/20, 5:10 PM, "users on behalf of Feinstein, Moses" <users-bounces at shibboleth.net on behalf of moses.feinstein at touro.edu> wrote:


>	Simply change  SAML2AttributeSourcedGenerator to the following:

Persistent NameIDs are handled by the pre-existing persistent generator plugin/bean that's already there. What you're posting there is not appropriate as a source for a SAML persistent NameID, because they have to be pairwise/targeted and that is not. It's undermining the core property they're supposed to have.

-- Scott